
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json)
Hash identifier: wZFwYAqz5I49uBvUmPmApgzPiK4yJzd0yp0ZwSmDzMg=
Subject key identifier: 07:38:FC:A0:09:54:43:04:08:BA:B5:9B:4D:3E:BE:4B:57:6B:3D:4B
Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
Manifest number: 061D
Signing time: Tue 18 Aug 2026 23:07:51 +0000
Manifest this update: Tue 18 Aug 2026 23:07:51 +0000
Manifest next update: Tue 25 Aug 2026 23:07:51 +0000
Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: jetlZq6Osn4Ywnt1ktA9baaGzUx/lOy2e8GPqIQeq4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Validity
Not Before: Aug 18 23:07:51 2026 GMT
Not After : Aug 25 23:07:51 2026 GMT
Subject: CN=6a84e5c7-ca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:7a:87:05:4b:80:d6:f5:7a:29:cb:55:fc:
f1:29:95:66:51:43:d1:e9:9f:04:67:e1:c2:1e:d9:
77:4c:3d:f3:1a:5e:d3:93:a0:69:d3:0d:a4:88:be:
55:83:68:ff:76:39:b0:3d:68:84:e9:2e:91:e6:ab:
bf:57:6f:b1:63:71:e8:da:28:e6:dc:15:9f:bc:83:
88:f2:a6:17:47:7b:ee:63:34:b3:ab:92:7e:76:d2:
d3:95:12:02:68:60:ed:94:cb:4d:e4:3c:30:f5:27:
fb:b3:62:e8:70:5d:0a:27:86:3d:5b:26:98:73:f9:
52:0e:f4:dd:45:8f:31:2d:e4:41:29:29:57:37:fe:
8c:fa:05:cf:6d:5a:97:91:5f:d5:5b:4f:bf:51:81:
08:a7:3e:e1:b6:d5:4e:e3:7a:e9:8c:a1:8f:12:35:
cf:a7:b6:25:03:8e:7a:d7:fc:7d:7a:0d:c4:94:11:
3e:ce:59:8b:73:b1:88:b1:5f:fe:8c:48:ad:ea:d5:
15:63:84:30:da:b1:ca:8e:a5:85:91:f6:24:f6:3f:
54:14:b9:5a:c6:68:52:dc:c2:96:5f:3e:97:63:86:
4b:f3:3f:75:30:46:ba:3a:16:97:c8:bb:37:db:f5:
ec:df:25:3a:38:f1:6e:b0:e2:60:ce:7e:06:3a:2b:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:FC:A0:09:54:43:04:08:BA:B5:9B:4D:3E:BE:4B:57:6B:3D:4B
X509v3 Authority Key Identifier:
keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:cf:d5:c3:dc:6d:a1:92:cb:6f:74:34:a2:fc:63:ce:bb:
01:5b:4f:74:55:ad:8d:45:b1:82:05:a3:2b:73:fc:be:6c:13:
46:66:88:de:cd:29:45:59:1d:22:09:b2:c8:43:59:3c:24:51:
cd:90:fa:cb:1d:c0:80:b9:dd:12:b9:55:f1:30:51:60:db:e4:
9d:72:96:c6:04:02:b8:0e:b2:4c:e0:1a:ee:d9:58:13:17:b1:
26:f8:0c:eb:d7:a3:d8:79:4d:7c:55:80:c3:57:51:b1:6b:be:
3e:39:83:de:03:d7:60:07:c6:1c:ac:50:b9:f5:71:b0:7e:44:
d6:a4:84:bd:42:67:dc:3e:2d:bd:7f:ad:97:05:bc:0b:79:97:
5f:c9:2c:d8:f8:85:58:41:b2:00:8e:a4:4e:57:1e:94:76:a9:
59:6d:bd:51:eb:4e:46:dc:69:c9:01:39:9e:fe:89:c4:eb:93:
31:39:68:9b:a8:f9:4f:7b:3b:61:54:8f:2c:af:01:d1:01:92:
bf:cf:54:ad:ce:49:43:11:8a:c9:33:97:59:9f:35:71:36:6c:
6b:8f:86:21:f8:c9:7e:c7:b0:dd:f2:c3:e2:c7:7c:3f:b3:c2:
bd:27:28:f8:b4:07:54:d0:8d:e5:f5:96:e2:8b:90:a0:7d:11:
a7:45:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:49 2026 by rpki-client